Cross-Site Scripting Vulnerability in MC Woocommerce Wishlist by MoreConvert

CVE-2025-47487

What is CVE-2025-47487?

The MC Woocommerce Wishlist plugin by MoreConvert has a vulnerability that allows attackers to exploit improper input handling during web page generation. This Cross-Site Scripting (XSS) flaw can result in reflected XSS attacks, putting users' sensitive information at risk. All versions from n/a to 1.9.1 are affected, highlighting the necessity for users to update and secure their applications to prevent potential exploitation.

References